A Flask application with registration and login. After login the session cookie is derived from the user name only, so it can be computed for any user.
Not startedDockercommit b5de4d6x86_64 · aarch64Secret
Get logged in as the admin user without knowing the admin password by forging the session cookie (authentication bypass).
The brief for this lab lives in its repository.